Methods and apparatus, including computer program products, implementing and using techniques for identifying pathways in a graph of interconnected nodes. A time series of graph data is captured, which corresponds to events occurring at different nodes in the graph. The graph is traversed to identify consistent and variable pathways, respectively, within the graph. The identified pathways are scored according to a particular feature to establish an expected variance model for the events contained within the graph. Newly received data are compared against the expected variance model to determine a degree to which the newly received data deviates from the expected variance. The variance model is adjusted based on the newly encountered data.
Legal claims defining the scope of protection, as filed with the USPTO.
1. A method in a fraud detection system for detecting fraud based on identified pathways in a graph of interconnected nodes, comprising: providing a data store and a network of interconnected nodes, wherein the nodes are configured to capture data passed from transactional or operational systems; capturing a time series of graph data corresponding to events occurring at different nodes in the graph; traversing the graph to identify consistent and variable pathways, respectively, at an instance level within the graph; scoring the identified pathways according to a particular feature to establish an expected variance model for the events contained within the graph; comparing newly received data against the expected variance model to determine a degree to which the newly received data deviates from the expected variance; generating an alert in the fraud detection system in response to detecting that a deviation between the newly received data and the expected variance exceeds a predetermined threshold; and automatically adjusting the variance model based on the newly encountered data.
2. The method of claim 1 , wherein the data represent financial transactions.
3. The method of claim 1 , wherein the time series of graph data is indicative of both time-based changes and structural changes.
4. The method of claim 1 , wherein scoring includes: increasing a score linearly according to a frequency with which a path recurs.
5. The method of claim 1 , wherein scoring includes: using a fuzzy matching technique.
6. The method of claim 5 , wherein different features are scored using different scoring techniques.
7. A fraud detection system for detecting fraud based on identified pathways in a graph of interconnected nodes, comprising: a processor; and a memory containing instructions that when executed by the processor causes the following method to be performed: providing a data store and a network of interconnected nodes, wherein the nodes are configured to capture data passed from transactional or operational systems; capturing a time series of graph data corresponding to events occurring at different nodes in the graph; traversing the graph to identify consistent and variable pathways, respectively, at an instance level within the graph; scoring the identified pathways according to a particular feature to establish an expected variance model for the events contained within the graph; comparing newly received data against the expected variance model to determine a degree to which the newly received data deviates from the expected variance; generating an alert in the fraud detection system in response to detecting that a deviation between the newly received data and the expected variance exceeds a predetermined threshold; and automatically adjusting the variance model based on the newly encountered data.
8. The system of claim 7 , wherein the data represent financial transactions.
9. The system of claim 7 , wherein the time series of graph data is indicative of both time-based changes and structural changes.
10. The system of claim 7 , wherein scoring includes: increasing a score linearly according to a frequency with which a path recurs.
11. The system of claim 7 , wherein scoring includes: using a fuzzy matching technique.
12. The system of claim 7 , wherein different features are scored using different scoring techniques.
13. A computer program product for detecting fraud based on identified pathways in a graph of interconnected nodes, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the program instructions being executable by a processor to cause the processor to perform a method comprising: providing a data store and a network of interconnected nodes, wherein the nodes are configured to capture data passed from transactional or operational systems; capturing a time series of graph data corresponding to events occurring at different nodes in the graph; traversing the graph to identify consistent and variable pathways, respectively, at an instance level within the graph; scoring the identified pathways according to a particular feature to establish an expected variance model for the events contained within the graph; comparing newly received data against the expected variance model to determine a degree to which the newly received data deviates from the expected variance; generating an alert in the fraud detection system in response to detecting that a deviation between the newly received data and the expected variance exceeds a predetermined threshold; and automatically adjusting the variance model based on the newly encountered data.
Cooperative Patent Classification codes for this invention. Click any code to explore related patents in that topic.
November 29, 2018
September 8, 2020
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.